Is HACK a Good Investment? The Case For and Against (2026)

HACK is the Amplify Cybersecurity ETF, tracking the Prime Cyber Defense Index of companies that provide cyber-security hardware, software, and services. The expense ratio is 0.60%. As the first cybersecurity ETF, it holds a relatively concentrated roster of pure-play security names, distinguishing it from broader tech or software funds that only touch the theme.

Largest holdings (approximate as of mid-2026; verify on Amplify ETFs's fund page):

HACK is the Amplify Cybersecurity ETF, the first cybersecurity ETF ever launched. It holds a focused basket of companies that build and sell cyber-defense technology, from firewall and endpoint vendors to cloud-security and threat-intelligence firms. It tracks the Prime Cyber Defense Index. The expense ratio is 0.60%. It suits investors who want targeted exposure to the security software and hardware theme. The obvious peers are CIBR and BUG, two rival cybersecurity ETFs; HACK is the original and holds a relatively concentrated roster of pure-play names.

In its favour: it gives you Prime Cyber Defense Index exposure in one ticker at a 0.60% expense ratio, which is simple to hold and cheap to own.

• Cost vs alternatives: 0.60% is the fee; compare it to funds tracking a similar index.
• Concentration: check how much of HACK sits in its largest holdings (AVGO, CSCO, NET).
• Overlap: if you already own a broad-market fund, you may already hold much of this.
• Tracking scope: HACK only gives you Prime Cyber Defense Index; it will not capture what sits outside that index.

“Diversified” is the word every index fund uses and it hides a wide range. The number that actually matters is how much of the fund sits in its largest positions, because that is the part that drives the return. In HACK, the three largest positions are about 21% of the fund and the 10 largest are about 54.3%, with the single biggest at roughly 8.5%. Those are approximate weights as of mid-2026, and because this is the published top 10 rather than the full book, treat 54.3% as a floor on concentration rather than the whole picture. Verify with Amplify ETFs.

That is a moderately concentrated fund. The largest names matter to the outcome without dominating it, which is typical of a broad market-cap-weighted index and is the shape most core holdings have.

This is also the number that decides whether HACK adds diversification to your portfolio rather than to a portfolio in the abstract. A fund can be well spread on its own and still concentrate you further, if its largest holdings are names you already own directly or through another fund. That is a question about your account rather than about HACK, and it is the one worth answering before you buy.

A fund is defined as much by what it leaves out as by what it holds, and the exclusions are rarely on the marketing page. HACK tracks Prime Cyber Defense Index, so anything outside that index is simply absent from your portfolio no matter how much of the fund you own.

In practice that means checking three gaps. Whether the geography you want is covered, since a US index holds no international companies and a developed-markets index holds no emerging ones. Whether the size band you want is covered, because a large-cap index excludes the smaller companies some investors specifically want exposure to. And whether the asset class you want is covered at all, since an equity fund holds no bonds and gives you nothing to rebalance against in a drawdown.

None of these are faults. They are the fund doing exactly what it says. The mistake is assuming that owning a diversified fund means being diversified, when it means being diversified within one index.

Being specific about this is more useful than another paragraph on why it might be right.

• You already own most of it. If a broad-market fund you hold already contains AVGO, CSCO, NET at meaningful weight, adding HACK mostly increases your exposure to the same companies while adding a second fee. That is the single most common way people accidentally concentrate.
• You want the exposure for a short horizon. An index fund is a way to own an asset class over years. Over months it is simply the index, with all of the index's volatility and none of the compounding that makes holding it worthwhile.
• You need income you can rely on. Distributions from an equity index fund vary with what the underlying companies pay, so they are not a schedule you can plan around the way a bond ladder is.
• A cheaper fund tracks the same thing. Where two funds follow a similar index, the difference in expense ratio is one of the few advantages available to you without taking extra risk. Compare before assuming 0.60% is competitive.

The useful question is rarely “will HACK go up?” It is “does this exposure fit my plan, at a cost I am happy with, without doubling up on what I already own?” Walnut connects your real brokerage so you can see exactly how HACK would overlap with your current holdings, analyze it by chatting through Claude or ChatGPT, and place any trade yourself. You stay in control.

The bottom line: HACK is a low-cost core building block for Prime Cyber Defense Index exposure, not a tactical bet on a single name. If you want Prime Cyber Defense Index exposure and the 0.60% fee is competitive for you, it does its job well. If you already own that exposure through another fund, adding it mostly doubles a fee without adding diversification. Decide from your goal and your existing holdings, not from where the market sat last week. Walnut is not an investment adviser.

• What is HACK? (holdings, cost, performance, and the themes it covers)
• HACK dividend: yield and schedule